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VERIFICATION METHOD FOR WEB-DELIVERED 
MATERIALS USING SELF-SIGNED CERTIFICATES 

Background of the Invention 
Field of the Invention 

The present invention relates to a method and system for verification of electronic 
purchases; more particularly, in a preferred embodiment, the present invention relates to 
a method and system for verifying that the person in possession of electronically-delivered 
tickets actually purchased them. 

Description of the Related Art 

The merger of the Internet and commerce to form what is now known worldwide 
as "E-Commerce" has led to the proliferation of the use of the Internet and World Wide 
Web ("the Web") for purchases of all kinds. Everything from airline tickets to 
automobiles to vitamins can be purchased on the Web and such sales have experienced 
explosive growth. Such purchases are referred to herein as Electronically-Purchased Items 
(EPFs). 

The area of electronic ticketing presents unique security issues not found with 
conventional "product-based" E-commerce, particularly when the tickets are delivered to 
the purchaser electronically and printed at the customer 1 s site. As an example, consider 
the sale of tickets to sporting and/or concert events over the Internet. For a company to 
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electronically distribute admission tickets for such events, the customers must be able to 
print the tickets on their local printer. Both the actual purchaser and the event promoter 
have an interest in being able to ensure that only the person who purchased the ticket is 
able to use it to attend the event. The problem, however, is that tickets printed in this 
manner are easily copied or able to be printed multiple times, thereby limiting the ability 
of the actual purchaser and event promoter to assure that only the actual purchaser is given 
access to the event. 

A company called "AdmissionControl.com" has introduced a system whereby 
electronic tickets are ordered and the purchase completed online by individuals who have 
pre-registered with the company using a credit card or debit card. The system of 
AdmissionControl.com does not involve the printing of a ticket; instead, 
AdmissionControl.com devices are located at the venue where the event is to occur. When 
attending an event, the purchaser brings the credit or debit card used to make the purchase 
and inserts the card into the AdmissionControl.com device. The device reads the 
identifying information off of the credit card or debit card and correlates this data, via a 
connection to an AdmissionControl.com database, with a valid purchase made through the 
AdmissionControl.com system. The device then sends an instruction to open barrier doors 
(e.g., release the lock on a turnstile) and to print a receipt with seating assignments for the 
appropriate number of validated admissions. Thus, the user must only bring the card used 
to make the purchase with them to gain entry into the event. 
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The AdmissionControl.com system, however, requires that the financial information 
related to the user's credit card (e.g. , credit card number; expiration date; billing address) 
be stored on the AdmissionControl.com ticketing system, and that it can either be stored 
at or transmitted to and from the event site. Data theft is an increasing problem with E- 
5 commerce and by allowing AdmissionControl.com to store and transmit valuable and 
confidential customer data, users may be reluctant to use the AdmissionControl.com 
system; use of the AdmissionControl.com system may subject this information to data 

O theft. In addition, having the customer data available at multiple event sites increases the 

2f number of possible intrusion points and thus reduces the security of the information. 

r%0 A technology known as Information Based Indicia (IBI) has been developed as a 

means for verifying the validity of a paper-based item bearing the IBI. The United States 

S] Postal Service is working on a project with third parties called the Information Based 

Indicia Program (IBIP). Information about IBIP can be found on the U.S. Postal Service 

r " web site at http : //www . usps . gov/IBIP . When used in connection with the U.S. Postal 

15 Service Project, the IBI is printed on an envelope and conveys evidence that the postage 
has been paid and contains mail processing data requirements as well as security-related 
data elements. The indicia is made up of human-readable information as well as a two- 
dimensional bar code with the following information: zip code; destination delivery point, 
software ID, ascending register; descending register; algorithm ID; device ID; date of 
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mailing; postage; digital signature; rate category; reserve field; indicia version number; 
and certificate serial number. 

Using the IBI printed on the paper document, such as the envelope in the postal 
service example, a bar code reader can look for particular information and verify that the 
bar code has identified a valid transaction. However, nothing prevents someone from 
printing or copying the information-based indicia and utilizing it on fraudulent paper 
documents or using it in a fraudulent manner with other paper documents. Thus, if used 
with the sale of event tickets, there is nothing to stop a user from purchasing one ticket and 
then printing multiple copies and/or prevent someone from fraudulently obtaining an 
authorized event ticket and photocopying it for use. 

In addition to the above-described security risks, the AdmissionControl.com system 
requires that printers, loaded with paper and toner, be maintained at all event sites so that 
the receipts and seating assignments can be printed out. 



In accordance with a preferred embodiment of the present invention, a two-step 
process is used to purchase and redeem an EPI, for example, a ticket. In the first step of 
the process, referred to herein as the "purchasing step," a self-signed certificate is 
generated by a selling server and is used to facilitate the encoding of a key printed as a 
readable indicia (e.g., a bar code) on a ticket prior to its printing. The self-signed 
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certificate, along with transaction-related data pertaining to the purchase is also transferred 
to a smart card of a purchaser; the combined information transferred is collectively known 
as verification-related information. Credit card information or other purchasing 
information of the purchaser is transmitted to the selling server and verified (but not 
stored) as part of this first step. 

In the second step of the process, referred to herein as the "validation step," when 
the purchaser completes the transaction, for example, attends the event for which the ticket 
is issued, the ticket is presented by the purchaser for validation. The verification-related 
digital certificate information from the smart card must be read to validate the encrypted 
information on the printed ticket before entry into the event, so that only the person 
holding the smart card used at the time of purchase can use the printed ticket for admission 
to the event. To assure that the ticket can only be validated once, as part of the validation 
step the verification-related digital certificate information is removed from the smart card 
or otherwise revoked. Once validated, the purchase is considered complete. 

In accordance with a first embodiment, the present invention comprises a method 
of correlating a purchaser of an electronically-purchased item ("EPI") with the EPI, the 
EPI to be subsequently received by the purchaser or the purchaser's designee, comprising: 
a purchasing step, wherein purchaser-related financial information is transferred to a seller 
of the EPI and verification-related digital certificate information is transferred from the 
seller to the purchaser; and a verification step, wherein the purchaser and the EPI are 
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correlated by requiring the purchaser or the purchasers designee to provide the 
verification-related digital certificate information before receiving the EPI and by 
electronically comparing the verification-related digital certificate information with the 
EPI. 

In a preferred embodiment, the purchasing step includes at least the steps of: 
creating an electronically-readable indicia corresponding to the verification-related digital 
certificate information; and associating the electronically-readable indicia with the EPI. 

In a more preferred embodiment, the EPI comprises tickets or other redeemable 
documents, the electronically-readable indicia comprises bar-coding markings oh the EPI, 
and the verification-related digital certificate information is stored and presented via a 
smart card. 

In a most preferred embodiment, the verification-related digital certificate 
information is removed from the purchaser's smart card upon verification to prevent 
multiple verifications. 

Brief Description of the Drawing s 

Figure 1 illustrates an example of a system which can be used in the practice of the 
present invention; 

Figure 2 is a flowchart illustrating the steps performed in accordance with a first 
embodiment of the present invention; and 
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Figure 3 illustrates an alternative embodiment of the present invention wherein the 
printing of a ticket purchased using the inventive method is delayed until a time after the 
purchase transaction. 



Figure 1 illustrates an example of a system which can be used to practice the present 
invention. For purposes of example only, the examples that follow pertain to a ticketing 
system; however, it is not intended to limit the present invention to ticketing systems and 
various changes and modifications will be apparent to one skilled in the art. 

Referring to Figure 1, a ticketing device 110 comprising, for example, a PC 112, 
smart card reader 1 14 and printer 116 is connected to a ticket server 130 via any known 
means, for example, the Internet 132. Typically, the ticketing device 1 10 would be located 
at a consumer's location and the ticket server 130 would be located at a ticket seller's 
location. A ticket validation device 120 is located at the venue where a ticket purchased 
by a consumer is to be used. The ticket validation device 120 comprises, for example, a 
PC 122, a smart card reader 124, and a coded-information reader 126, for example, a bar- 
code reader. A Point-of-Sale (POS) terminal commonly found at grocery stores is one 
example of such a device. In an alternative embodiment, the ticket validation device 120 
is connectable to ticket server 130 via any known means, such as a direct network 
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connection or via the Internet. Further, in this alternative embodiment, a printer 128 is 
also connectable to ticket validation device 120. 

The operation of the invention in accordance with a first embodiment is illustrated 
now with reference to Figures 1 and 2. Figure 2 is a flowchart illustrating the steps 
performed in accordance with the first embodiment. 

At step 202, a ticket is electronically ordered using ticket device 110. Typically, 
this would involve a consumer establishing a connection between ticket device 110 and 
ticket server 130 via the Internet. The consumer accesses a website of the ticket seller and 
makes a ticket selection in a well known, conventional manner, e.g., by "clicking" on a 
listed event and a specific date, and then providing billing information, such as a credit 
card number and expiration date of the credit card. 

As part of the ticket ordering process, in accordance with the present invention, the 
consumer also "reads in" a smart card 140 via smart card reader 114. Smart cards are 
well known and typically comprise a plastic card approximately the size of a standard 
credit card. They typically include a computer chip enabling the card to store and/or 
process information and often include a "digital certificate," a password protected, 
encrypted data file which includes name information and other data which serves to 
identify the owner of the smart card. The digital certificate also includes a public key 
which serves to verify the "digital signature" (a matching key) of the smart card owner in 
a known manner. For the purpose of this invention, the reading in of the smart card at this 
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step is simply to make it accessible to receive and store verification-related information as 
discussed below. 

Digital certificates are typically created using what are known as digital certificate 
"tool kits" . Most digital certificate tool kits also provide the tools necessary to create new 
certificates, known as "self-signed certificates". When a certificate is created using a 
digital certificate tool kit, a verification system that will be validating or verifying the 
certificate must also be supplied with the appropriate "creator information" identifying the 
creator of the certificate. Only those verification systems that have been provided with a 
certificate from the creator of a self-signed certificate will be able to accept the certificate 
as valid. 

In accordance with the present invention, at step 204 when a request for purchase 
is presented to the selling server by a purchaser, as part of the transaction the selling server 
issues a confirmation of the purchase to the purchaser. This confirmation includes a self- 
signed certificate which is transmitted and stored on the smart card of the purchaser. In 
a preferred embodiment, the self-signed certificate information is combined with 
transactional-related information; this information (the self-signed certificate and/or the 
transactional-related information) is collectively referred to herein as verification-related 
digital certificate information. 

The verification-related digital certificate information may include, in addition to 
"creator" information, transaction-related information such as, in connection with ticket 
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sales for an event, the owner of the smart card and any other desired parameters; the date 
of the event; performer at the event; seating information; price of the ticket, etc., and this 
information is transmitted to the ticket server 130 as part of step 204. The confirmation 
message is received by the consumer at ticket device 110. Upon receipt of the ticket 
confirmation message, the consumer sends to the ticket server, via automatic or manual 
input to the ticket device transmitted over the Internet, a request for a printable ticket 
bearing encoded key information (step 206). 

The ticket server 130 receives this request and returns a file to the ticket device 110 
consumer comprising printable ticket and the encoded information corresponding to the 
verification-related digital certificate information forwarded to and stored on the smart card 
(step 208). 

When the consumer prints the printable ticket, he/she receives a printed ticket 
bearing the machine-readable encoded information (e.g., in bar code format). Completion 
of this step completes the purchasing step of the two-step process of the present invention. 

The validation step of the process typically will take place at the event location. At 
step 210, the consumer takes the printed ticket and the smart card used in connection with 
the purchase (and which, therefore, has stored thereon the verification-related digital 
certificate information) to the venue where the event is to take place and presents the 
printed ticket 142 to the ticket validation device 120. The encoded key information is read 
by the ticket validation device 120, and the user is requested to input the smart card to the 
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device 120. At step 212, the smart card information is read into the validation system. 
At step 214, a determination is made as to whether or not the key on the printed ticket 
matches or otherwise is validated by the smart card information provided. 

If the information on the ticket corresponds to the smart card information, at step 
216 the ticket is validated and the bearer is given access to the event. The validation can 
come in several forms, including a printed validation ticket; alternatively, the validation 
process can unlock a turnstile or other barrier device to allow access. To avoid multiple 
validation of identical tickets using the same smart card, if desired the validation process 
can include the implementation of a "record lock" so that a proper validation can occur 
only once. This can be implemented in a variety of known ways, for example, through 
the use of software flags that are set once a proper validation has occurred. Alternatively, 
or in addition to, the use of record locks, a biometric validation system (e.g., thumbprint 
scan or eye scan) can be used to link the card holder to the card owner and block validation 
if the biometric validation fails. As another alternative, the ticket server can maintain a 
certificate revocation list and revoke a certificate after a successful purchase validation has 
occulted. 

If the key on the printed ticket does not correspond to the smart card information, 
at step 218 the ticket is rejected and the bearer is denied access to the event. If desired, 
a signal or other indication means can automatically alert event staff or other authorities 
that an unauthorized access is being attempted. 

11 
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Figure 3 illustrates an alternative embodiment in which the printing of the ticket is 
delayed until later requested by the purchaser. In the example shown in Fig. 3, the 
printing is delayed until the purchaser arrives at the event venue. Steps 302, 304, and 306 
correspond to steps 202, 204, and 212, respectively, of Figure 2 and the operation thereof 
is identical to that described above. However, once the smart card is read into the event 
validation system at the event venue, at step 308 the ticket verification device 
communicates with the ticket server to determine if the smart card information corresponds 
to a valid ticket order. If a valid ticket purchase is confirmed, at step 310 a paper ticket 
is printed and given to the smart card bearer, which ticket is then surrendered upon entry 
into the venue. Further attempts to validate the same "ticket" will be rejected as described 
above. 

If, at step 308, a determination is made that the smart card information does not 
correspond to a valid ticket order, at step 312, the bearer of the smart card is rejected 
access to the event. Again, as described above, if desired, a signal or other indication 
means can automatically alert event staff or other authorities that an unauthorized access 
is being attempted. 

While the above "delayed printing" alternative described above with respect to 
Figure 3 illustrates the printing of the ticket at the event site, it is not intended for the 
present invention to be so limited. For example, the ability to delay printing is also useful 
in situations where the purchaser orders tickets from a remote location, e.g., via a cell 
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phone or PDA. The user could input the smart card information at the time the print 
request is made; alternatively, digital certificate information identical to that sent to and 
stored on the smart card could be sent to and stored on the cell phone or PDA. This 
method allows a remote purchaser to purchase/order tickets and print them at a later, 
convenient time when access to a printer is available. Like the above examples, the 
printed ticket will still have to be presented with the smart card so that the ticket could be 
validated. 

If multiple tickets are ordered and all ticket-holders cannot enter the venue with the 
purchasing party (e.g., in the case where one or more of the ticket holders wants to arrive 
earlier or later than the purchasing party) then when the tickets are printed, an option can 
be made available to allow the seller to transmit personal smart card information such as 
a personal digital certificate to the selling server to be included with the verification-related 
digital certificate information transmitted back to the smart card. This would be followed 
by entry of the smart card information of the proposed ticket holder (which is also included 
in the verification-related digital certificate information), so that the ticket holder will then 
be able to validate the ticket with his/her smart card. This makes the purchase 
transferable. 

Using the present invention, there is no need to go to a "will-call" window to pick 
up tickets or to have them delivered at an additional delivery charge. Further, in contrast 
to the prior art AdmissionControl.com system, there is no need to store and access the 
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purchaser's confidential credit card information, thereby removing the data security risks 
associated therewith. All financial information related to the purchase is completed during 
the purchasing step, and no financial information is stored by the system. In addition, 
since users will frequently be printing the tickets at a location other than the event site, and 
since the validation information is all carried by the ticket holder on the smart card, the 
amount of data required to be stored at the event location (or accessed by the ticket 
validation devices at the event location) is minimized. 

Although the present invention has been described with respect to a specific 
preferred embodiment thereof, various changes and modifications may be suggested to one 
skilled in the art. For example, the present invention can be utilized in the purchase and 
sale of non-redeemable items, e.g. bicycles, toys, books, consumer products, etc. by, for 
example, transmitting the digital certificate information over the Internet to the seller of 
the goods at the time of purchase. On the seller end, they could print out a label or a 
verification document bearing the bar-coded digital certificate information. When the 
purchaser comes to a store location to pick up the purchased item, the seller can require 
verification by scanning the bar code and scanning in the smart card before releasing the 
goods to the purchaser. It is thus intended that the present invention encompass such 
changes and modifications as fall within the scope of the appended claims. 



14 



